WordPress lets you add multiple users with different roles, so team members, writers, or developers can help without sharing one login. Managing roles well keeps your site secure. This guide explains how.
Adding a user #
- Go to Users > Add New.
- Enter a username and email.
- Set a strong password.
- Choose a role (see below).
- Click Add New User.
Understanding the roles #
- Administrator: full control; give sparingly.
- Editor: can manage and publish all content.
- Author: can write and publish their own posts.
- Contributor: can write posts but not publish.
- Subscriber: can manage their profile only.
Grant the least access needed #
For security, give each person the lowest role that lets them do their job. Reserve Administrator for people who truly need full control, since that role can change everything, including other users.
Managing and removing users #
- Edit a user to change their role or reset their password.
- Remove users who no longer need access, and reassign their content when prompted.
Security tips #
- Require strong passwords.
- Avoid sharing accounts; give each person their own.
- Consider two-factor authentication for admins.
Need help? #
If you need help setting up roles for your team, our support team can advise over live chat.
